Configure conflict processing policy, Configure an undefined access processing policy, Ip/mac mismatch processing policy – H3C Technologies H3C Intelligent Management Center User Manual
Page 449: Ip address monitor processing policy
435
b.
Click Terminal Access on the navigation tree on the left.
c.
Click Access Configuration under Terminal Access from the navigation tree on the left.
2.
Click Unauthorized Access Processing Policy in the Access Configuration page.
The Unauthorized Access Processing Policy page appears.
Configure conflict processing policy
1.
Select Yes or No in the Send Alarm list.
2.
Select an interface shutdown policy in the Interface Shutdown list. If you select Do not shut down,
you go to the next section.
3.
Configure the duration before the interface is shut down in the Shut Down the Interface in (5-1800
seconds) field, if prompted.
4.
Select the operation to be performed after the interface is shut down in the After the Interface is
Down for a Period list, if prompted.
5.
Configure the duration before the interface is brought up in the Bring up the Interface in (5-1800
seconds) field, if prompted.
Configure an undefined access processing policy
1.
Select Illegal in the Undefined Access list. If you select Legal, you go to the next section.
2.
Select Yes or No in the Send Alarm list.
3.
Select an interface shutdown policy in the Interface Shutdown list.
4.
Configure the duration before the interface is shut down in the Shut Down the Interface in (5-1800
seconds) field, if prompted.
5.
Select the operation to be performed after the interface is shut down in the After the Interface is
Down for a Period list, if prompted.
6.
Configure the duration before the interface is brought up in the Bring up the Interface in (5-1800
seconds) field, if prompted.
7.
Adopt the default IP/MAC Mismatch Processing Policy, which is Send Alarm.
8.
Click OK.
IP/MAC Mismatch Processing Policy
This policy is enabled and cannot be disabled. IMC generates an alarm when detecting that the IP and
MAC address of a managed device are not bound in IMC. For information about configuring an
IP/MAC address binding, see "
IP Address Monitor Processing Policy
When a device is added, IMC checks whether the ARP table of the device contains unallocated IP
addresses in IP Allocation Management. If it is, IMC further determines their legitimacy according to the
IP Address Monitor Processing Policy. IP addresses are considered legitimate if they pass one or both of
the check items in the policy. IP addresses are considered illegitimate if they fail both check items in the
policy.
To configure the IP Address Monitor Processing Policy:
1.
Select Yes or No from the Send Alarm list.
This parameter specifies whether IMC sends an alarm when an illegitimate IP address is found in
the ARP table of a newly added device.